Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/f8e7d867-c35e-4e69-a815-ba1e9b336d62/2/AS201251.roa
File: AS201251.roa (raw, json)
Hash identifier: 8GE11PlyjJSlqFpCIeSJe1jscNstpT75h4JFoMmWXec=
Subject key identifier: 52:F4:9C:91:7D:38:74:8D:15:91:9D:53:E0:0B:BA:26:78:7F:0E:DF
Certificate issuer: /CN=d12ea65dee9873b5dcf3c6c0224faea6fcb8aea6
Certificate serial: 633AE53E407158CCE2786711E20001F22C2DE7B4
Authority key identifier: D1:2E:A6:5D:EE:98:73:B5:DC:F3:C6:C0:22:4F:AE:A6:FC:B8:AE:A6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0S6mXe6Yc7Xc88bAIk-upvy4rqY.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/f8e7d867-c35e-4e69-a815-ba1e9b336d62/2/AS201251.roa
Signing time: Sun 01 Jan 2023 23:59:24 +0000
ROA not before: Sun 01 Jan 2023 23:54:24 +0000
ROA not after: Sun 31 Dec 2023 23:59:24 +0000
asID: 201251
IP address blocks: 2a06:a005:22b0::/44 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
63:3a:e5:3e:40:71:58:cc:e2:78:67:11:e2:00:01:f2:2c:2d:e7:b4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d12ea65dee9873b5dcf3c6c0224faea6fcb8aea6
Validity
Not Before: Jan 1 23:54:24 2023 GMT
Not After : Dec 31 23:59:24 2023 GMT
Subject: CN=52F49C917D38748D15919D53E00BBA26787F0EDF
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:dc:20:f7:27:56:97:8a:13:89:e4:35:a6:fe:
93:ad:15:d5:2d:c5:c2:b7:7a:64:53:c5:8d:be:8e:
e7:46:60:20:69:27:81:27:43:8c:a0:60:e0:7a:e8:
8b:26:b6:b8:49:4c:11:0d:83:12:60:0e:1b:88:a7:
76:e5:19:63:2b:87:52:3d:ff:10:49:d3:08:53:80:
64:b9:62:58:c3:54:bb:da:d6:b5:ab:6e:11:2a:f0:
72:fc:dc:14:84:f2:95:e7:50:b7:f4:7c:93:4b:61:
01:bc:71:78:85:9c:3c:27:6d:c5:c0:e2:43:77:d6:
eb:7b:4d:70:df:5f:75:78:6a:92:68:18:e7:5d:ab:
d5:91:44:88:d5:3c:2d:df:63:c4:dd:e3:e1:6c:a7:
ac:4b:1a:57:90:4d:63:05:3e:8f:1b:e2:c4:0e:75:
4b:25:f1:ac:18:fd:af:fb:f6:d2:f6:6d:b8:d6:6c:
e7:ab:40:71:48:2b:53:ab:aa:c8:c8:ab:ba:0c:ab:
c6:10:40:58:b3:d5:4c:6b:00:f7:3b:a2:23:00:36:
63:f7:54:99:87:3c:85:78:30:fe:db:33:71:95:b7:
fc:eb:b7:69:9c:72:68:20:dc:d1:0a:ab:8c:ee:71:
2a:2a:6b:2c:77:b8:fa:12:fd:d5:30:d6:38:10:35:
76:01
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
52:F4:9C:91:7D:38:74:8D:15:91:9D:53:E0:0B:BA:26:78:7F:0E:DF
X509v3 Authority Key Identifier:
keyid:D1:2E:A6:5D:EE:98:73:B5:DC:F3:C6:C0:22:4F:AE:A6:FC:B8:AE:A6
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/f8e7d867-c35e-4e69-a815-ba1e9b336d62/2/D12EA65DEE9873B5DCF3C6C0224FAEA6FCB8AEA6.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0S6mXe6Yc7Xc88bAIk-upvy4rqY.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/f8e7d867-c35e-4e69-a815-ba1e9b336d62/2/AS201251.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a06:a005:22b0::/44
Signature Algorithm: sha256WithRSAEncryption
13:06:f4:32:d2:3a:b8:88:60:8f:b7:f0:a0:71:55:2b:d0:a4:
88:7f:24:97:fd:99:9c:00:dc:c7:e1:93:5c:a3:23:3f:a1:89:
5f:fa:e8:9d:36:fc:94:ab:b7:eb:f8:a5:4d:7b:9c:64:bd:a2:
bf:e7:05:aa:d6:e9:5f:34:f7:78:3f:40:f9:40:2e:e5:d0:1e:
1f:da:a5:11:c5:93:5f:da:11:97:58:2f:8e:cb:34:d8:08:5b:
a8:0e:b0:1a:6b:ba:8f:27:b0:72:23:df:ce:83:d1:2f:f2:4b:
ca:03:9d:8d:f1:85:e7:86:91:e0:00:2d:9e:56:58:53:56:7b:
55:5b:56:cd:51:51:67:0d:0e:b1:27:be:e2:f4:65:fd:90:35:
82:f6:1a:f4:96:4a:8a:29:3e:fb:c3:17:58:a0:81:3e:7e:cc:
b5:5c:c2:e0:af:bb:ed:00:e1:b7:0d:ff:27:8a:48:70:f3:d9:
2a:14:7a:56:22:fe:74:d9:bd:fe:31:46:4d:2d:10:f3:e1:1f:
ea:11:42:87:d8:f7:be:95:4b:0a:02:6f:df:42:d8:23:56:46:
51:d8:6c:a7:72:5d:f9:33:cc:72:82:72:5e:70:89:4b:ae:32:
36:60:cd:ec:06:d7:7f:35:35:e8:14:4d:53:c7:0c:fc:c1:29:
b5:20:1a:32
-----BEGIN CERTIFICATE-----
MIIFAzCCA+ugAwIBAgIUYzrlPkBxWMzieGcR4gAB8iwt57QwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoZDEyZWE2NWRlZTk4NzNiNWRjZjNjNmMwMjI0ZmFlYTZm
Y2I4YWVhNjAeFw0yMzAxMDEyMzU0MjRaFw0yMzEyMzEyMzU5MjRaMDMxMTAvBgNV
BAMTKDUyRjQ5QzkxN0QzODc0OEQxNTkxOUQ1M0UwMEJCQTI2Nzg3RjBFREYwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC+3CD3J1aXihOJ5DWm/pOtFdUt
xcK3emRTxY2+judGYCBpJ4EnQ4ygYOB66IsmtrhJTBENgxJgDhuIp3blGWMrh1I9
/xBJ0whTgGS5YljDVLva1rWrbhEq8HL83BSE8pXnULf0fJNLYQG8cXiFnDwnbcXA
4kN31ut7TXDfX3V4apJoGOddq9WRRIjVPC3fY8Td4+Fsp6xLGleQTWMFPo8b4sQO
dUsl8awY/a/79tL2bbjWbOerQHFIK1OrqsjIq7oMq8YQQFiz1UxrAPc7oiMANmP3
VJmHPIV4MP7bM3GVt/zrt2mccmgg3NEKq4zucSoqayx3uPoS/dUw1jgQNXYBAgMB
AAGjggINMIICCTAdBgNVHQ4EFgQUUvSckX04dI0VkZ1T4Au6Jnh/Dt8wHwYDVR0j
BBgwFoAU0S6mXe6Yc7Xc88bAIk+upvy4rqYwDgYDVR0PAQH/BAQDAgeAMIGVBgNV
HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvZjhlN2Q4NjctYzM1ZS00ZTY5LWE4MTUtYmExZTliMzM2
ZDYyLzIvRDEyRUE2NURFRTk4NzNCNURDRjNDNkMwMjI0RkFFQTZGQ0I4QUVBNi5j
cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw
ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzBTNm1YZTZZYzdYYzg4YkFJay11cHZ5
NHJxWS5jZXIwewYIKwYBBQUHAQsEbzBtMGsGCCsGAQUFBzALhl9yc3luYzovL3Jz
eW5jLnBhYXMucnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L2Y4ZTdkODY3LWMzNWUt
NGU2OS1hODE1LWJhMWU5YjMzNmQ2Mi8yL0FTMjAxMjUxLnJvYTAYBgNVHSABAf8E
DjAMMAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcEKgag
BSKwMA0GCSqGSIb3DQEBCwUAA4IBAQATBvQy0jq4iGCPt/CgcVUr0KSIfySX/Zmc
ANzH4ZNcoyM/oYlf+uidNvyUq7fr+KVNe5xkvaK/5wWq1ulfNPd4P0D5QC7l0B4f
2qURxZNf2hGXWC+OyzTYCFuoDrAaa7qPJ7ByI9/Og9Ev8kvKA52N8YXnhpHgAC2e
VlhTVntVW1bNUVFnDQ6xJ77i9GX9kDWC9hr0lkqKKT77wxdYoIE+fsy1XMLgr7vt
AOG3Df8nikhw89kqFHpWIv502b3+MUZNLRDz4R/qEUKH2Pe+lUsKAm/fQtgjVkZR
2Gyncl35M8xygnJecIlLrjI2YM3sBtd/NTXoFE1Txwz8wSm1IBoy
-----END CERTIFICATE-----
Generated at Sun Feb 16 22:13:09 2025 by rpki-client